Re: [ossec-list] Syscheck file changes being sent in alerts but not showing up in the queue/diff folder

2018-02-15 Thread dan (ddp)
On Wed, Feb 14, 2018 at 2:26 PM, wrote: > OSSEC is sending alerts of file changes to alerts.log, but I do not see > anything in /var/ossec/queue/diff. I have report_changes set to yes. Inside > /var/ossec/queue/syscheck/agent_directory it show a list of files with > hashes, but not what actually

[ossec-list] Syscheck file changes being sent in alerts but not showing up in the queue/diff folder

2018-02-14 Thread temp . email . ith
OSSEC is sending alerts of file changes to alerts.log, but I do not see anything in /var/ossec/queue/diff. I have report_changes set to yes. Inside /var/ossec/queue/syscheck/agent_directory it show a list of files with hashes, but not what actually changed, nor before and after hashes either.